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Inventive step (IS) 


Claims 
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Industrial applicability (lA) 
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2. Citations and e?q>lanations (Rule 70.7) 

Claims 1-60 The closest prior art was found to be: 

• WO 2003/042840 A 

• EP 1195679 A 

• EP1067460B 

No individual citation nor obvious combination of citations discloses all of the essential features 
of the present invention. 
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The Claims 

1. A data [solafion system for software and data maintenance, back up and recovery for a 
computer wherein dynamic data files are identified and passed mto at least one hidden 

• partition on a hard disic of the computer, the passing being by one or more selected Irom the 
group consisting of. copying and redirection; 

wherein the at least one hidden partition and its content is neither manageable nor 
accessible by the computer's operating system; and the dynamic data files in the hidden 
partition are not accessible by any software application on the computer. 

2. The system as claimed in claim 1, wherein the group further ineiudes filtering and access 
control 

3. The system as claimed In claim 1 or daim 2. wherein automatic back ups are made to the 
dynamic data files in the hidden partition whenever the dynamic data files are accessed and 
modified. 

4. The as claimed in any one of daims 1 to 3. wherein the dynamic data files include tfie 
computer's operating environment so that the computer's operating environment can be 
restored fit>m the dynamic data files in the hidden partition. 

6- The system as claimed In any one of claims 1 to 4, wherein the dynamic data files in the 
hkiden partifion include data up to the time of a feiilure of the computer's system. 

6. The system as claimed in any one of daims 1 to 6. wherein compression Is used ibr at least 
one file of the dynamic data files In the hidden parfifion. 

7. The system as dalmed in any one of claims 1 to 6, wherein encryption is used for at least 
one of the dynamic data files in the hidden partition. 

8. The system as daimed in any one of claims 1 to 7, wherein prior to copying tiie dynamhs data 
files into the hidden partition, all soflware installed on flie computer, induding a primary 
operating system for ttie computer, is segregated into at least one slatic routine and the 
dynamic data files, dynamic data files including system configuration files, and user data files. 

9. The system as claimed in claim 8, wherein the segregation comprises categorization. 
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10. The system as claimed in claim 8 or claim 9. wherein all data sent from the primary operating 
system to the dynamic date files and all data sent from the dynamic data files to the primary 
operating system is passed to the dynamic data files in the hidden partition. 

11. The system as claimed In any one of daims 1 to 10, wherein the dynamic data fifes In the 
hidden partition are continuously updated and the original dynamic data files in a main 
partition of the hard disk are continuously updated. 

12. The system as daimed in any one of claims 1 to 11. wherein on system fecovery, a last back 
up system environment in the hidden partition, including the copied dynamic data files, is 
lecovered. 



13. The system as claimed in claim 12. wherein the dynamk: data files in Ihe hidden partition 
include all data up to an Instant iDefore the recovery process was invoked, and the system 
environment includes the primary, operating system and software. 

14. The system as claimed in any one of daims 1 to 13. wherein upon new software being 
mstaHed in the computer, the instadatton is delayed until a back up of the existing system 
envinsnment to the hidden partition is completed and. after compiation of the back up, the 
installation is resumed. ' - 

16. The system as daimed in daim 14. wherein if system InstaiJillty or failure is encountered after 
the installation or running of the new soflvrare, the computer system restores the previous 
operating environment from the back up. 

16. The system as claimed in any one of claims 1 to 15. wherein upon a new device driver being 
Installed in the computer, the installation is delayed until a back up of the existing system 
environment to the hidden partition is completed and. after completion of the back up, the 
installation is resumed and. If system instability or failure is encountered after the installation 
or running of the new device driver, the computer system restores the previous operating 
environment from the back up. 

17. The system as daimed in any one of daims 1 to 16.' whereih software application and its 
dynamic dafa files are copied to the hidden partition as independent modules. 
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18. The systam as claimed In any one of claims 1 to 17. wherein the dynamic data files In the 
hidden partition work as active data files for a software application and are continuously 
updated. 

19. The system as claimed in claim 9 or any one of claims 10 to 18 v^en appended to daim 9 
wherein the segregating or categorizing of the data files of is by use of a data Isolation 
technique that consists of one or mom selected from the group consisting of: 

(a) automatic selection of commonly used software application of the operating system; 

(b) automatic selection of commonly used software application 

<c) selection of software application by a user of the computer; and 
(d) selection of files or file folders by the user 

20. The system as claimed in claim 19. wherein for (a), (b) and (c), ail dynamic data files 
belonging to the software application will be automatically segregated and stored to the 
hidden partition. 

21. The system as claimed in claim 19. wherein for (d). the selected files or all the dynamic data 
files belonging to the selected file folders will be automatically segregated and stored to the 
hidden parti&on. 

22. A system as claimed in claim 1 1 or any one of claims 12 to 22 when appended to claim 1 1 
Wherein an additionall/O driver Is placed between a file system I/O interfece and a disk driver 
for access control, intercepting, filtering and r^lireding. data for the dynamic data files in the 
hidden pamtfon. the addittonal I/O driver using an secondary operafang system. 

23. The system as claimed in claim 23. wherein the access control. inten^pBng. filtering and re- 
directing is by the use of regulatory, matching, and fulfillment tables. 

24. The system as claimed in daim 23 or dalm 24. wherehi the additional I/O driver is part of one 
or more selected from the group consisttng ofi the disk driver, the file system I/O interfece 
and the operating system. ' 

25. The system as claimed in any one of daims 23 to 25. wherein the secondary operating 
system is different to flie primary operating system. 

26. The system as daimed in any one of dalms 23 to 26. wherein bad. up and .Bcoveiy use one 
of the primary operating system and the secondaiy operating system. 
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T^"" ^ ^'"'"^ ' *° ^^^'^ ^^"^'"^ fites stored in 

the hidden partition are protected. 

rt r*"" "'""^ '"^ ' 28. Wherein the dynamic data fUes sio^ fn 

the hidden partition are used as active woridng files and ar« confinuously updated. 

29. The ^stem as claimed In claim 29. wherein a plurality of back-up copies of each dynamic 
c«ata file in the hidden partition te made in the hidden partition using a firBt4n.f},^<,ut 
sequence. «<9i-w«i 

30. The system as dafmed In claim 30. wherein upon accessing and modilying an vworidng data 
fite. the piurality of iDadc-ups are updated accorting to a piB^gned back-up schedule. 

31. A system for managing access to a host computer by a remote computer whei^in access by 
the remote computer is fn accordance with a software security access policy In the host 
computer. 

. wherein dynamic data flies are identified and passed info a hidden partHlon on a hard 
disk of the host computer, the passing being by one or more selected from the greup 
consisting oft copying and redirection. 

32. The system as claimed in dalm 31. wherein the software security access policy has a file 
access right and control mechanism. 

33. The system as claimed In claim 32. wherein the file access right and control mechanism is 
used to selectively provide protection to selected software application and their respective • 
dynamo data files. 

34. The system as dalmed m dalm 32 or claim 33. wherein the file access right and control 

(a) selection of software application/programs; 

(b) selection of dynamic data files of the software application: 

(c) selection of configuration files; 

(d) selectipnofdatafileorfoldenand 

(e) selecHon of the type of the operation to be perfomted by the remote computer. 
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35. The system as datmed in dalm 34. wherein the selected file, or files belonging to the 
selected fblder. are autematica/ly given the access right while any others will be denied 
access. 

36. The system as claimed In claim 34 or claim 35. wherein the file access right and control 
mechanism of the host computer are pre^letermlned by a category of the remote host 
computer and different remote computers are given different access rights for different usage. 

37. The system as cialtDed in claim 36. wherein all files Including program, configuration and user 
data are automatically given the access right while all others a» denied access. 

* 

. 38. The system as claimed In any one of claims 33 to 37. wherein the host computer has an 
additional I/O driver placed between a fiia system I/O interfece and a disk driver for access 
control, intercepting, filtering and re-dlrectlng data for the dynamic data files, the additional 
WO driver using an secondary operating system. 

39. -me system as claimed In claim 38. wherein the access control. Intercepting, filtering and re- 
directing is byihe use of regulatoiy. notching, and fulfillment tables. 

40. Thesystemasclaimedinclaim38orclaim39.whei^infh6addrt5onall/Odriverispartofone ' 
or more selected from the group consisting oft the disk driver, the file system I/O interfece. 
aid the primary operating system. 

41. The system as dalmeii in any one of claims 38 to 40. wherein the secondaiy opei^ting 
system Is different to the primary operating system. 

42. The system as claimed in any one of claims 38 to 41. wherein back up and recovery use one 
of the primary operating system and the secondary operating system. 

43. The system as claimed in any one of claims 38 to 42. wherein the remote access is through 
the secondary operating system. 

44. The system as claimed in. claim 31 or any one of claims 32 to 43 when appended to dalm 31 
Wherein the selected software application and their respective dynamic data files are 
identified and are located In at least one partition of the primary operating system of the host 
computer. 
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45. The system as dalmed In any one of claims 29 to 44. wher^m the host computer using 
diagnostic utilities to allow remote technical support by the remote computer. 

46. A system for providing an external back up for at least one computer to at least one hidden 
parbtion of a centralized back up server, wherein dynamic data files of the at least one 
computer are Identified and passed Into the at least one hidden partition on a hanJ disk of the 
centralized back up sender, the passing being by one or more selected f^om the group 
consisting of: coping and redirection. 

47. The system as claimed in claim 46. wherein the at least one hidden partition of the 
centralized back up sender Is accessed using at least one selected fiom the group consisting 
of a: 1^, WAN, VPN, Intranet and Internet 

48. The system as claimed in claim 4a or claim 47. wherein critical applications and their dynamic 
date fites are stored and pmtebted in the at least one hidden partition of the centralized back 
up sender by using enoyptton and are only abte to be accessed by authorized users. 

49. The system as claimed In any one of claims 46 to 48, wherein the at teast one computer has 
an additional I/O driver placed between a fite system. I/O interface and a disk driver for access 
control, intemeptlng. filtering and redirecting date for the dynamfc date faes. the additional 
I/O driver using a secondaiy operating system. 

60. -n^ system as datmed in claim 49. wherein the access control. Intereepting. filtering and re- 
directing is by the use of regulatory, matehing. and lUlfillment tebles. 

51. The system as claimed in dalm 49 or claim 50. wherain the additional I/O driver is part of one 
or more setected firom the group consisting oft the disk driver, the file system I/O interim, 
and the primary operating system. 

52. The system as claimed in any one of claims 49 to 51. wherein «,e secondary operating 
system is differehttoa primary operating system of ttie at teast one computer. 

53. The system as claimed In claim 52. wherein back up and recovery use one of tiie primary 
operating system and the secondary operating system. 

54. The system as claimed in any one of claims 49 to 53. wherein communteation with the 
centralized back up server is tiwouah the secondary operating system. 
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55. The system as claimed In any one of claims 1 to 30 further including a system for 
management of access to a host computer by a remote computer as claimed in any one of 
claims 31 to 45. 

66. The system as claimed in any one of claims 1 to 30 or daim 65, further including a system for 
providing an external back up as claimed in any one of claims 46 to 54. 

67. The system for management of access to a host computer by a remote computer as claimed 
In any one of claims 31 to 45 further Including a system for providing an external back up as 
clainried in any one of claims 46 to 54. 

58- Computer usable medium comprising a computer program cot;|e that is configured to cause a. 
process or to execute one or more functions to perform a system as claimed In any one of 
claims 1 to 57. 
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